Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: pLRCKFQ+hmqu9nC05+RwEvPAbmANhkyGWcFUNbTd1Q8=
Subject key identifier: CF:B9:07:92:A1:35:E8:7B:52:9E:30:C0:0A:AF:28:6A:4F:F9:6F:71
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 0199239F95D13447BF23BFFB9553F8359AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:25 +0000
Manifest this update: Sun 07 Sep 2025 10:01:25 +0000
Manifest next update: Mon 08 Sep 2025 10:01:25 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: NWqdBDWuGm1q+5PDOrQ+d2wsBke0r7A9fpcq2qlTOx0=)
2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:95:d1:34:47:bf:23:bf:fb:95:53:f8:35:9a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Sep 7 10:01:25 2025 GMT
Not After : Sep 8 10:01:25 2025 GMT
Subject: CN=cfb90792a135e87b529e30c00aaf286a4ff96f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:d0:3c:d2:50:3c:2c:be:66:89:f3:32:5e:
f4:da:e6:8f:45:72:a0:4e:62:bf:2e:09:a1:9a:a2:
0e:af:f7:e1:23:c7:27:aa:29:70:11:2c:84:e8:de:
f6:ec:69:39:87:14:3b:a2:25:64:d9:76:84:71:05:
35:25:5a:70:92:ef:8c:65:8b:b1:6a:0a:41:f0:85:
8b:5c:79:ec:ce:ab:1a:6a:d5:5a:e3:16:44:5c:1b:
04:71:d8:f0:5e:d5:8e:8e:8f:c4:07:a2:8b:ec:39:
61:8f:e8:24:78:cf:7d:3d:c3:94:0e:c6:20:d9:e7:
7d:50:cf:97:2b:02:a6:ed:95:27:85:57:74:e4:fb:
ca:93:4f:b3:88:eb:9b:41:3f:42:b0:e3:45:bd:08:
92:80:ea:a4:81:a4:73:c4:37:18:cf:71:ee:49:70:
3e:87:c9:0c:a2:3f:08:36:6f:cb:41:ce:6a:d9:44:
27:da:67:6c:f6:6d:c8:d6:42:26:46:b1:3e:52:b1:
f2:1d:a9:ba:25:fc:69:de:85:1b:d0:4b:69:5f:12:
0c:a8:42:fb:8b:f7:b8:d7:9a:ac:9c:f4:a3:80:81:
07:50:d6:8b:42:30:bf:90:c6:9d:8e:ad:79:b5:ea:
08:4c:65:3f:24:6a:23:19:34:60:8d:ce:fb:a0:1e:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B9:07:92:A1:35:E8:7B:52:9E:30:C0:0A:AF:28:6A:4F:F9:6F:71
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1d:f4:b6:91:52:12:d9:67:3b:9e:f0:70:90:a6:ff:90:25:
1d:20:85:89:35:56:83:e1:c2:52:4d:50:cd:bc:ec:b1:42:87:
ce:14:4b:7c:25:24:21:e2:14:c1:cf:ab:8c:32:df:33:2b:ac:
43:db:8c:bc:f2:79:9a:fa:a1:96:d5:16:a8:72:07:fc:40:60:
e5:e3:83:9c:f1:25:43:51:b2:3a:c8:bb:25:32:43:91:5c:e5:
73:4f:fc:fe:d8:83:3c:e8:34:a2:61:b2:8d:c2:f2:c4:1f:6b:
80:59:40:ce:6a:5f:2d:5b:5c:9d:e2:db:23:a5:fa:b9:20:ee:
de:2d:07:66:d8:e8:bc:3d:c8:2d:5e:df:de:e3:4a:48:73:23:
b7:02:49:52:4d:e2:52:e9:27:8f:90:eb:fd:99:71:52:e8:c1:
f2:28:6e:64:ad:ad:52:8f:11:eb:a9:32:d5:68:66:c3:75:fd:
53:5d:0f:22:15:73:6c:f0:b0:4c:f9:aa:47:c9:e1:7f:b3:ae:
bf:9f:e1:47:d1:90:93:56:4e:a1:e6:c4:42:74:de:8a:6c:72:
e6:30:56:0e:12:b1:44:88:fb:d0:ab:f3:da:d5:10:3b:31:1f:
66:9e:63:c7:65:fc:fe:75:67:66:dc:ce:9a:a9:71:f2:50:21:
d9:29:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:57 2025 by rpki-client